Legal

Privacy Policy

Last updated 7 October 2026

DuoSages is where people bring questions they care about. This policy explains what we keep, why, who helps us run the app, and how you stay in control of it.

In short. We keep what you write so the app can work: your readings, conversations and notes, synced to your account. To write readings and replies, what you type is sent to trusted AI service providers. We do not sell your data, we show no ads, and the app has no analytics or tracking. You can export your data, delete any part of it, or delete your account at any time.

1. Who we are

DuoSages ("we", "us") runs the DuoSages app and is responsible for your data. Contact us at support@duosages.com.

2. What we collect

Without an account

You can look around DuoSages without signing in. Anything you do then is stored only on your device and never reaches our servers.

With an account

Account: your email address and sign-in details. If you sign in with Google, we receive your email address from Google.
Profile: the name you choose to go by, what brings you to DuoSages, and your reading preferences. Your birth date, if you choose to add it. If you mention your age in a conversation, we may note it, so the Sages can respond appropriately to younger people.
What you write and what the Sages write: your questions, conversations, readings, the cards and hexagrams cast, your journal notes, and your daily draws.
What the Sages notice: short observations distilled from your readings, such as themes you return to and practices you were given. You can see, correct and delete every one of them in the app.
Settings: such as your deck, theme and default spread.
Purchases: what you bought, when, the price, and the store's transaction reference, so your readings and membership work on every device. Payments are handled by Google Play or the App Store; we never receive your card details.
Support, feedback and reports: what you send us, with basic details that help us answer (your platform, app version and membership).
Usage records: for each AI request, its type, time, model and size, to manage cost and fair use. These records hold no question or reply text and are deleted after 7 days.

What we do not collect

No advertising identifiers, no location, no contacts, and no analytics or crash-reporting tools. Your phone's country setting is used on the device only, to show the right helpline numbers, and is not sent to us.

3. How we use it

To write your readings and replies, and to keep them in your journal and conversations.
To let the Sages remember what you have shared, so later readings fit your situation.
To sync your data between your devices.
To handle purchases and membership.
To keep people safe: to recognise when someone may be in danger or may be young, and to respond with care and with help information instead of a reading.
To answer support requests and improve the app from the feedback and reports you send.

We rely on providing the service you asked for, on our legitimate interest in keeping the app safe and working, and on your consent where the law requires it.

4. The AI that writes the Sages' words

To write your readings and replies, DuoSages sends what you type, together with the context the reply needs (the cards cast, the conversation so far, the name you go by, and what the Sages have noticed), to trusted AI service providers. They process it to produce the reply and return it to us. Your age is only included when you are under 18, so replies stay appropriate.

We do not keep a separate copy of what you send or what comes back: it lives in your own account, as your readings and conversations. If a request fails, a short excerpt of the error may stay in our server logs for a few days so we can fix it.

5. Who else is involved

We share data only with the companies that help us run DuoSages, and only for that purpose:

Supabase: hosts our database, sign-in and servers, in the United States.
Trusted AI service providers: write the readings and replies, as described above.
Google Play and the Apple App Store: process payments and subscriptions under their own privacy policies.
Google: if you choose to sign in with Google.
An email delivery provider: sends account emails such as sign-up confirmation and password reset.
Cloudflare: serves the deck artwork. These downloads carry no personal information.

We do not sell your personal data or share it for advertising. We will disclose information if the law requires it, or to protect someone from serious harm.

6. Where your data is stored

Your account data is stored in the United States. Where data moves between countries, we rely on our providers' contractual safeguards.

7. How long we keep it

Your account data stays for as long as you keep your account.
A reading or conversation you delete is removed from your devices straight away and erased from our servers within 90 days.
AI usage records are deleted after 7 days; billing logs and reading-balance history after 90 days; in-app notices after 180 days.
When you delete your account, everything above is deleted at once, including purchase records. Google and Apple keep their own records of your purchases.

8. Your choices and rights

See and correct: everything you have written is in the app. Under What the Sages notice you can reword or remove any observation.
Delete: a single reading, your conversations, everything the Sages noticed, or all of your content, from You, then Your data.
Export: take a copy of your profile, settings, readings and conversations as a file, from You, then Your data.
Delete your account: in the app, or by email; see how to delete your account.
Notifications: the Sages' check-ins are scheduled on your phone; you can turn them off at any time in your phone's notification settings.

Depending on where you live, you may have further rights, such as to access, port, restrict or object to how your data is used, and to complain to your data protection authority. To use any of them, write to support@duosages.com; we answer within 30 days.

9. Children

DuoSages is for people aged 13 and older, and under-18s need a parent or guardian's permission. If you believe a child under 13 has an account, write to us and we will delete it.

10. Security

Data is encrypted in transit, and each account can only reach its own data. Our support team cannot read your readings or conversations. No system is perfectly secure, so please keep your sign-in details private.

11. Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top shows the latest version.

12. Contact

Privacy questions and requests: support@duosages.com.